yarn.lock: refresh transitive dependencies with open advisories

Browse Source

Lockfile only. 89 open Dependabot alerts; each vulnerable range was checked against yarn.lock and `yarn up -R` moved every package with a fix inside its dependents' ranges (tar, axios, form-data, shell-quote, fast-uri, brace-expansion, ...); terser-webpack-plugin 5.6 drops serialize-javascript.

Left, with no fix inside range: sprintf-js 1.0.3 (no fixed version exists; via argparse 1 / js-yaml 3) and image-size 1.2.1 (fixed in 2.0.3; metro 0.83 asks for ^1.0.2).

...

This commit is contained in:

Satoshi Qazi Muhammed committed 2026-10-10 02:47:43 +04:00

1 parent c46ce1a9e6

commit 02ca668d2d

1 file changed

+248 -363

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

yarn.lock

+248 -363

File diff suppressed because it is too large. Load diff